Configuring Client Login

Procedure

1. Log in to your bastion host.
2. Choose System > System Config > Security.
3. On the right of the Client Login Config bar, click Edit. The Client Login Config dialog box is displayed.
4. Set the client login parameters by referring to Table 1.

   Table 1 Configuring Client Login

   Parameter	Description	Example Value
   Idle timeout	If no operation is performed within the specified period after a successful login, the user is automatically logged out. The user needs to log in again. The value ranges from 1 to 43,200, in minutes. The default value is 30.	30
   Logon with SSH key	Whether to enable SSH key login authentication for users who have been logged out after idle timeout. This function is enabled by default.
   Logon with password	Whether to enable SSH password authentication for users who have been logged out after idle timeout. This function is enabled by default.
   Captcha Validation Free Time	After multifactor authentication is enabled, you can configure a grace period for authenticated SSH sessions, allowing users to reconnect without entering credentials repeatedly during this period. The default value is 0, which means that you must enter the verification code for each login. The value ranges from 0 to 168, in hours. The default value is 0. NOTE: If the validation-free time is changed, you need to enter the verification code again when logging in over the SSH client. The configured validation-free time will be counted from the start again.	0

5. Click OK.